Subversion Repositories livecd

Rev

Rev 420 | Go to most recent revision | Details | Compare with Previous | Last modification | View Log | RSS feed

Rev Author Line No. Line
420 beyerleu 1
 
2
lang en_GB.UTF-8
3
keyboard us
4
timezone Europe/Brussels --isUtc
5
auth --useshadow --enablemd5
6
selinux --enforcing
7
firewall --enabled --service=mdns
8
xconfig --startxonboot
9
part / --size 10240 --fstype ext4
10
services --enabled=NetworkManager --disabled=network,sshd
11
 
12
 
13
# Root password
14
rootpw --iscrypted $6$K2nKf02kVKG68960$OywvoaViphSITuro/liKvCj7Pm/CH/xqzz/lsoXyaKSR1lYf0vHAqSUc483a9MCCBkIwfr/hNMfqwxqVO0OEg1
15
 
16
# Workaround for the grubby issue on live media (see https://bugzilla.redhat.com/show_bug.cgi?id=1153410)
17
# SL repositories (fastbugs enabled per default) 
18
repo --name=base      --baseurl=http://ftp.scientificlinux.org/linux/scientific/7.3/$basearch/os/               --excludepkgs=grubby
19
repo --name=security  --baseurl=http://ftp.scientificlinux.org/linux/scientific/7.3/$basearch/updates/security/ --excludepkgs=grubby
20
repo --name=fastbugs  --baseurl=http://ftp.scientificlinux.org/linux/scientific/7.3/$basearch/updates/fastbugs/ --excludepkgs=grubby
21
repo --name=grubby    --baseurl=http://ftp.scientificlinux.org/linux/scientific/7.0/$basearch/os/                    --includepkgs=grubby
22
 
23
# or use a mirror close to you
24
#repo --name=base      --baseurl=http://mirror.switch.ch/ftp/mirror/scientificlinux/7.3/$basearch/os/               --excludepkgs=grubby
25
#repo --name=security  --baseurl=http://mirror.switch.ch/ftp/mirror/scientificlinux/7.3/$basearch/updates/security/ --excludepkgs=grubby
26
#repo --name=fastbugs  --baseurl=http://mirror.switch.ch/ftp/mirror/scientificlinux/7.3/$basearch/updates/fastbugs/ --excludepkgs=grubby
27
#repo --name=grubby    --baseurl=http://ftp.scientificlinux.org/linux/scientific/7.0/$basearch/os/                       --includepkgs=grubby
28
 
29
# for yum-conf-epel
30
repo --name=repos     --baseurl=http://ftp.scientificlinux.org/linux/scientific/7x/repos/$basearch
31
 
32
# epel
33
#repo --name=epel      --baseurl=http://download.fedoraproject.org/pub/epel/7/$basearch
34
repo --name=epel      --baseurl=http://ftp-stud.hs-esslingen.de/pub/epel/7/$basearch
35
 
36
 
37
%packages
38
@base
39
@core
40
@dial-up
41
@directory-client
42
@fonts
43
@gnome-desktop
44
@guest-agents
45
@guest-desktop-agents
46
@input-methods
47
@internet-browser
48
@java-platform
49
@multimedia
50
@network-file-system-client
51
@print-client
52
@x11
53
@internet-applications
54
@office-suite
55
#@remote-desktop-clients
56
@gnome-apps
57
 
58
# additional packages
59
@backup-client
60
@compat-libraries
61
@development
62
@emacs
63
@graphics
64
@legacy-x
65
@network-tools
66
@performance
67
@perl-runtime
68
@php
69
@technical-writing
70
 
71
# console-internet
72
lftp
73
mutt
74
whois
75
 
76
# legacy-unix
77
finger
78
ksh
79
telnet
80
 
81
# network-tools
82
nmap
83
wireshark
84
wireshark-gnome
85
iptraf-ng
86
netsniff-ng
87
 
88
# scientific
89
atlas
90
fftw
91
gnuplot
92
lapack
93
numpy
94
scipy
95
units
96
 
97
# system-admin-tools
98
screen
99
system-storage-manager
100
tree
101
mc
102
 
103
# development
104
java-1.7.0-openjdk-devel
105
 
106
# live install tools
107
anaconda
108
system-config-keyboard
109
firefox
110
patch
111
 
112
# for UEFI/Secureboot support
113
grub2
114
grub2-efi
115
efibootmgr
116
shim
117
 
118
# add yum-conf-epel 
119
yum-conf-epel
120
 
121
# packages from epel repo
122
dd_rescue
123
ddrescue
124
fuse-sshfs
125
gparted
126
iperf3
127
NetworkManager-openvpn-gnome
128
ntfs-3g
129
ntfsprogs
130
 
131
%end
132
 
133
%post
134
# FIXME: it'd be better to get this installed from a package
135
cat > /etc/rc.d/init.d/livesys << EOF
136
#!/bin/bash
137
#
138
# live: Init script for live image
139
#
140
# chkconfig: 345 00 99
141
# description: Init script for live image.
142
### BEGIN INIT INFO
143
# X-Start-Before: display-manager
144
### END INIT INFO
145
 
146
. /etc/init.d/functions
147
 
148
if ! strstr "\`cat /proc/cmdline\`" rd.live.image || [ "\$1" != "start" ]; then
149
    exit 0
150
fi
151
 
152
if [ -e /.liveimg-configured ] ; then
153
    configdone=1
154
fi
155
 
156
exists() {
157
    which \$1 >/dev/null 2>&1 || return
158
    \$*
159
}
160
 
161
# Make sure we don't mangle the hardware clock on shutdown
162
ln -sf /dev/null /etc/systemd/system/hwclock-save.service
163
 
164
livedir="LiveOS"
165
for arg in \`cat /proc/cmdline\` ; do
166
  if [ "\${arg##rd.live.dir=}" != "\${arg}" ]; then
167
    livedir=\${arg##rd.live.dir=}
168
    return
169
  fi
170
  if [ "\${arg##live_dir=}" != "\${arg}" ]; then
171
    livedir=\${arg##live_dir=}
172
    return
173
  fi
174
done
175
 
176
# enable swaps unless requested otherwise
177
swaps=\`blkid -t TYPE=swap -o device\`
178
if ! strstr "\`cat /proc/cmdline\`" noswap && [ -n "\$swaps" ] ; then
179
  for s in \$swaps ; do
180
    action "Enabling swap partition \$s" swapon \$s
181
  done
182
fi
183
if ! strstr "\`cat /proc/cmdline\`" noswap && [ -f /run/initramfs/live/\${livedir}/swap.img ] ; then
184
  action "Enabling swap file" swapon /run/initramfs/live/\${livedir}/swap.img
185
fi
186
 
187
mountPersistentHome() {
188
  # support label/uuid
189
  if [ "\${homedev##LABEL=}" != "\${homedev}" -o "\${homedev##UUID=}" != "\${homedev}" ]; then
190
    homedev=\`/sbin/blkid -o device -t "\$homedev"\`
191
  fi
192
 
193
  # if we're given a file rather than a blockdev, loopback it
194
  if [ "\${homedev##mtd}" != "\${homedev}" ]; then
195
    # mtd devs don't have a block device but get magic-mounted with -t jffs2
196
    mountopts="-t jffs2"
197
  elif [ ! -b "\$homedev" ]; then
198
    loopdev=\`losetup -f\`
199
    if [ "\${homedev##/run/initramfs/live}" != "\${homedev}" ]; then
200
      action "Remounting live store r/w" mount -o remount,rw /run/initramfs/live
201
    fi
202
    losetup \$loopdev \$homedev
203
    homedev=\$loopdev
204
  fi
205
 
206
  # if it's encrypted, we need to unlock it
207
  if [ "\$(/sbin/blkid -s TYPE -o value \$homedev 2>/dev/null)" = "crypto_LUKS" ]; then
208
    echo
209
    echo "Setting up encrypted /home device"
210
    plymouth ask-for-password --command="cryptsetup luksOpen \$homedev EncHome"
211
    homedev=/dev/mapper/EncHome
212
  fi
213
 
214
  # and finally do the mount
215
  mount \$mountopts \$homedev /home
216
  # if we have /home under what's passed for persistent home, then
217
  # we should make that the real /home.  useful for mtd device on olpc
218
  if [ -d /home/home ]; then mount --bind /home/home /home ; fi
219
  [ -x /sbin/restorecon ] && /sbin/restorecon /home
220
  if [ -d /home/liveuser ]; then USERADDARGS="-M" ; fi
221
}
222
 
223
findPersistentHome() {
224
  for arg in \`cat /proc/cmdline\` ; do
225
    if [ "\${arg##persistenthome=}" != "\${arg}" ]; then
226
      homedev=\${arg##persistenthome=}
227
      return
228
    fi
229
  done
230
}
231
 
232
if strstr "\`cat /proc/cmdline\`" persistenthome= ; then
233
  findPersistentHome
234
elif [ -e /run/initramfs/live/\${livedir}/home.img ]; then
235
  homedev=/run/initramfs/live/\${livedir}/home.img
236
fi
237
 
238
# if we have a persistent /home, then we want to go ahead and mount it
239
if ! strstr "\`cat /proc/cmdline\`" nopersistenthome && [ -n "\$homedev" ] ; then
240
  action "Mounting persistent /home" mountPersistentHome
241
fi
242
 
243
# make it so that we don't do writing to the overlay for things which
244
# are just tmpdirs/caches
245
mount -t tmpfs -o mode=0755 varcacheyum /var/cache/yum
246
mount -t tmpfs vartmp /var/tmp
247
[ -x /sbin/restorecon ] && /sbin/restorecon /var/cache/yum /var/tmp >/dev/null 2>&1
248
 
249
if [ -n "\$configdone" ]; then
250
  exit 0
251
fi
252
 
253
# add live user with no passwd
254
action "Adding live user" useradd \$USERADDARGS -c "Live System User" liveuser
255
passwd -d liveuser > /dev/null
256
usermod -aG wheel liveuser > /dev/null
257
 
258
# Remove root password lock
259
passwd -d root > /dev/null
260
 
261
# turn off firstboot for livecd boots
262
systemctl --no-reload disable firstboot-text.service 2> /dev/null || :
263
systemctl --no-reload disable firstboot-graphical.service 2> /dev/null || :
264
systemctl stop firstboot-text.service 2> /dev/null || :
265
systemctl stop firstboot-graphical.service 2> /dev/null || :
266
 
267
# don't use prelink on a running live image
268
sed -i 's/PRELINKING=yes/PRELINKING=no/' /etc/sysconfig/prelink &>/dev/null || :
269
 
270
# turn off mdmonitor by default
271
systemctl --no-reload disable mdmonitor.service 2> /dev/null || :
272
systemctl --no-reload disable mdmonitor-takeover.service 2> /dev/null || :
273
systemctl stop mdmonitor.service 2> /dev/null || :
274
systemctl stop mdmonitor-takeover.service 2> /dev/null || :
275
 
276
# don't enable the gnome-settings-daemon packagekit plugin
277
echo -e "\ngsettings set org.gnome.settings-daemon.plugins.updates active 'false' &>/dev/null || :" >> /home/liveuser/.bashrc
278
 
279
# don't start cron/at as they tend to spawn things which are
280
# disk intensive that are painful on a live image
281
systemctl --no-reload disable crond.service 2> /dev/null || :
282
systemctl --no-reload disable atd.service 2> /dev/null || :
283
systemctl stop crond.service 2> /dev/null || :
284
systemctl stop atd.service 2> /dev/null || :
285
 
286
# disable kdump service
287
systemctl --no-reload disable kdump.service 2> /dev/null || :
288
systemctl stop kdump.service 2> /dev/null || :
289
 
422 beyerleu 290
# disable tuned.service
291
systemctl --no-reload disable tuned.service 2> /dev/null || :
292
systemctl stop tuned.service 2> /dev/null || :
293
 
420 beyerleu 294
# Mark things as configured
295
touch /.liveimg-configured
296
 
297
# add static hostname to work around xauth bug
298
# https://bugzilla.redhat.com/show_bug.cgi?id=679486
299
echo "localhost" > /etc/hostname
300
 
301
# Fixing the lang install issue when other lang than English is selected . See http://bugs.centos.org/view.php?id=7217
302
/usr/bin/cp /usr/lib/python2.7/site-packages/blivet/size.py /usr/lib/python2.7/site-packages/blivet/size.py.orig
303
/usr/bin/sed -i "s#return self.humanReadable()#return self.humanReadable().encode('utf-8')#g" /usr/lib/python2.7/site-packages/blivet/size.py
304
 
305
EOF
306
 
307
# bah, hal starts way too late
308
cat > /etc/rc.d/init.d/livesys-late << EOF
309
#!/bin/bash
310
#
311
# live: Late init script for live image
312
#
313
# chkconfig: 345 99 01
314
# description: Late init script for live image.
315
 
316
. /etc/init.d/functions
317
 
318
if ! strstr "\`cat /proc/cmdline\`" rd.live.image || [ "\$1" != "start" ] || [ -e /.liveimg-late-configured ] ; then
319
    exit 0
320
fi
321
 
322
exists() {
323
    which \$1 >/dev/null 2>&1 || return
324
    \$*
325
}
326
 
327
touch /.liveimg-late-configured
328
 
329
# read some variables out of /proc/cmdline
330
for o in \`cat /proc/cmdline\` ; do
331
    case \$o in
332
    ks=*)
333
        ks="--kickstart=\${o#ks=}"
334
        ;;
335
    xdriver=*)
336
        xdriver="\${o#xdriver=}"
337
        ;;
338
    esac
339
done
340
 
341
# if liveinst or textinst is given, start anaconda
342
if strstr "\`cat /proc/cmdline\`" liveinst ; then
343
   plymouth --quit
344
   /usr/sbin/liveinst \$ks
345
fi
346
if strstr "\`cat /proc/cmdline\`" textinst ; then
347
   plymouth --quit
348
   /usr/sbin/liveinst --text \$ks
349
fi
350
 
351
# configure X, allowing user to override xdriver
352
if [ -n "\$xdriver" ]; then
353
   cat > /etc/X11/xorg.conf.d/00-xdriver.conf <<FOE
354
Section "Device"
355
	Identifier	"Videocard0"
356
	Driver	"\$xdriver"
357
EndSection
358
FOE
359
fi
360
 
361
EOF
362
 
363
chmod 755 /etc/rc.d/init.d/livesys
364
/sbin/restorecon /etc/rc.d/init.d/livesys
365
/sbin/chkconfig --add livesys
366
 
367
chmod 755 /etc/rc.d/init.d/livesys-late
368
/sbin/restorecon /etc/rc.d/init.d/livesys-late
369
/sbin/chkconfig --add livesys-late
370
 
371
# enable tmpfs for /tmp
372
systemctl enable tmp.mount
373
 
374
# work around for poor key import UI in PackageKit
375
rm -f /var/lib/rpm/__db*
376
releasever=$(rpm -q --qf '%{version}\n' --whatprovides system-release)
377
basearch=$(uname -i)
378
rpm --import /etc/pki/rpm-gpg/RPM-GPG-KEY-*
379
echo "Packages within this LiveCD (with version)"
380
rpm -qa | sort
381
echo "Packages within this LiveCD"
382
rpm -qa --qf "%{name}\n" | sort
383
# Note that running rpm recreates the rpm db files which aren't needed or wanted
384
rm -f /var/lib/rpm/__db*
385
 
386
# go ahead and pre-make the man -k cache (#455968)
387
/usr/bin/mandb
388
 
389
# save a little bit of space at least...
390
rm -f /boot/initramfs*
391
# make sure there aren't core files lying around
392
rm -f /core*
393
 
394
# convince readahead not to collect
395
# FIXME: for systemd
396
 
397
cat >> /etc/rc.d/init.d/livesys << EOF
398
 
399
 
400
# disable updates plugin
401
cat >> /usr/share/glib-2.0/schemas/org.gnome.settings-daemon.plugins.updates.gschema.override << FOE
402
[org.gnome.settings-daemon.plugins.updates]
403
active=false
404
FOE
405
 
406
# Show the system-config-keyboard tool on the desktop
407
mkdir /home/liveuser/Desktop -p >/dev/null
408
cat /usr/share/applications/system-config-keyboard.desktop | sed '/NotShowIn/d' |sed 's/Terminal=false/Terminal=true/' > /home/liveuser/Desktop/system-config-keyboard.desktop
409
cat /usr/share/applications/liveinst.desktop | sed '/NoDisplay/d' > /home/liveuser/Desktop/liveinst.desktop 
410
chmod +x /home/liveuser/Desktop/*.desktop
411
chown -R liveuser:liveuser /home/liveuser
412
 
413
# Liveuser face
414
if [ -e /usr/share/icons/hicolor/96x96/apps/fedora-logo-icon.png ] ; then
415
    cp /usr/share/icons/hicolor/96x96/apps/fedora-logo-icon.png /home/liveuser/.face
416
    chown liveuser:liveuser /home/liveuser/.face
417
fi
418
 
419
# make the installer show up
420
if [ -f /usr/share/applications/liveinst.desktop ]; then
421
  # Show harddisk install in shell dash
422
  sed -i -e 's/NoDisplay=true/NoDisplay=false/' /usr/share/applications/liveinst.desktop 
423
  # need to move it to anaconda.desktop to make shell happy
424
  #cp /usr/share/applications/liveinst.desktop /usr/share/applications/anaconda.desktop
425
fi
426
  cat >> /usr/share/glib-2.0/schemas/org.gnome.shell.gschema.override << FOE
427
[org.gnome.shell]
428
favorite-apps=['liveinst.desktop','firefox.desktop', 'evolution.desktop', 'empathy.desktop', 'rhythmbox.desktop', 'shotwell.desktop', 'libreoffice-writer.desktop', 'nautilus.desktop', 'gnome-documents.desktop', 'anaconda.desktop']
429
FOE
430
 
431
 
432
# set up auto-login
433
cat > /etc/gdm/custom.conf << FOE
434
[daemon]
435
AutomaticLoginEnable=True
436
AutomaticLogin=liveuser
437
FOE
438
 
439
# Turn off PackageKit-command-not-found while uninstalled
440
if [ -f /etc/PackageKit/CommandNotFound.conf ]; then
441
  sed -i -e 's/^SoftwareSourceSearch=true/SoftwareSourceSearch=false/' /etc/PackageKit/CommandNotFound.conf
442
fi
443
 
444
# make sure to set the right permissions and selinux contexts
445
chown -R liveuser:liveuser /home/liveuser/
446
restorecon -R /home/liveuser/
447
 
448
# Fixing default locale to us - does not work for SL7.1
449
#localectl set-keymap us
450
#localectl set-x11-keymap us
451
EOF
452
 
453
# rebuild schema cache with any overrides we installed
454
glib-compile-schemas /usr/share/glib-2.0/schemas
455
 
456
 
457
%end